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Abstract 

We consider Grover's unstructured search problem in the setting where each oracle call has 
some small probability of failing. We show that no quantum speed-up is possible in this case. 

1 Introduction 

(~| ■ Unstructured search problem: The unstructured search problem, also known as the unordered 

Q-i search problem or as Grover's search problem, is the most basic problem in the query model. The 

goal is to find a marked entry out of N possible entries. In this model the entries are accessible 
only through a black box (the oracle), and the complexity of the algorithm is measured in terms 
of the number of oracle queries. In the classical world, it is easy to see that solving this search 
problem requires 0(N) queries, even if we allow randomization. In the quantum world, however, 
one can find a marked item with only 0{\/N) queries, as was shown in Grover's seminal paper 
||8|. Moreover, it is known that this is optimal (see, e.g., EUsHll). This remarkable quadratic 
improvement is considered one of the biggest successes of quantum computing, and has sparked 
a huge interest in the quantum query model (see ||2J for a recent survey). 

Searching with a faulty oracle: In this paper we consider the unstructured search problem in 
the faulty oracle model, a question originally presented to us by Harrow [9]. In this model, each 
oracle call succeeds with some probability 1 — p, and with the remaining probability p the state 
given to the oracle remains unchanged. More formally, each oracle call maps an input state p into 
(1 — p) ■ OpO^ ~^ V ' P where O is the original (unitary) oracle operation. We note that this model 
can be seen to be equivalent to other, seemingly more realistic, models of faults, such as the model 
considered in Shenvi et al. [19J in which the oracle's operation is subject to small random phase 
fluctuations. 

Our motivation for considering the faulty oracle model is twofold. First, we believe that since 
the unstructured search problem is such a basic question, it is theoretically interesting to consider 
it in different settings, as this might shed more light on the strengths and weaknesses of quantum 
query algorithms. A second motivation is related to implementation aspects of quantum query 
algorithms, as one can expect any future implementation of a Grover oracle to be imperfect (see 
||l9fl for a further discussion of the physical significance of the model). 



*School of Computer Science, Tel- Aviv University, Tel- Aviv 69978, Israel. Supported by the Binational Science Foun- 
dation, by the Israel Science Foundation, and by the European Commission under the Integrated Project QAP funded 
by the 1ST directorate as Contract Number 015848. 

'''School of Computer Science, Tel-Aviv University Tel-Aviv 69978, Israel. 



1 



To motivate our main result and to get some intuition for the model, let us consider the be- 
havior of Grover's original algorithm in this setting. Recall that Grover's algorithm can be seen 
as a sequence of two alternating reflections, OUOUOU ■ ■ ■ OU where U is the reflection given by 
Grover's algorithm and O is the reflection representing the oracle call. In the analysis of Grover's 
algorithm, one observes that the state of the system is restricted to a two-dimensional subspace, 
inside which lie the initial state and the target state. The angle between these two states is essen- 
tially n/2. Furthermore, the combined operation OJJ of two consecutive reflections can be seen a 
rotation by an angle of essentially 1/ \/N inside this two dimensional subspace. Hence the total 
number of oracle calls required to get to the target state is 0{^/N). 

In the faulty oracle model, each oracle call O has some constant probability of not doing any- 
thing. Hence, the sequence of reflections might look like OUOUOUUOUOUOUO. The effect of 
this is that after a sequence of rotations OJi by 1/\/N, we instead obtain a sequence of rotations 
UO = {OUy hy -I/VN which cancel the previous ones. The cancellation can also be seen by 
noting that = = I. The end result is that instead of rotating towards the target, our rotation 
behaves like a random walk, alternating between steps of I/VN and steps of —I/Vn. Using 
known properties of random walks on a line, the number of steps required for this walk to reach 
the target is &{N), which shows that Grover's algorithm is no better than the naive classical search 
algorithm. 

But can there be another, more sophisticated algorithm that copes better with the faults? Our 
main result shows that the answer is essentially 'no'. 

Our result: Our main result shows that there is essentially no quantum advantage when search- 
ing with a faulty oracle. 

Theorem 1. Any algorithm that solves the p-faulty Grover problem must use T > jq^y—^N queries. 

In particular, for any constant p > 0, this gives a lower bound of n(N). 

Notice that the above statement holds for any quantum algorithm, and not just for Grover's 
algorithm. In particular, it shows that some natural approaches, like fault-tolerant quantum com- 
putation [14], cannot help in this setting. Note, however, that this impossibility result applies only 
in case that the oracle is truly a black-box oracle; if, instead, the oracle is given as a faulty cir- 
cuit, then fault-tolerant schemes can be used to achieve a quantum speed-up by applying them to 
the circuit obtained by taking Grover's algorithm and replacing the oracle calls with their circuit 
implementation. 

Related work: There has been a considerable amount of work dedicated to analyzing Grover's 
algorithm in all kinds of faulty settings (see, e.g., fflSl [191 [TSl ). All these works concentrate on 
Grover's algorithm (or variants thereof) and none of them give a general statement that applies 
to all algorithms. In particular, Shenvi et al. [19J analyze the behavior of Grover's algorithm in a 
physically motivated model that is equivalent to ours. Our result answers the main open question 
presented in their paper. 

There has also been a significant amount of work on searching with an imperfect, but still uni- 
tary, oracle (see, e.g., [l6l|TTH7[[l2l|20l). Such oracles are sometimes known as noisy oracles. The 
motivation for this model is algorithmic, and is related to what is known as amplitude amplifi- 
cation. Typically in this case, the quantum speed-up of 0{^/N) is still achievable. Very roughly 
speaking, this is because a unitary operation (even an imperfect one) is reversible and does not 
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lead to decoherence. There has also been some recent work on analyzing the case of an imper- 
fect unitary implementation of Grover's algorithm (as opposed to an imperfect oracle) ||T6| , again 
showing that a speed-up of 0{\/N) is achievable. 

Open problems: One interesting open question is to extend our result to other physically inter- 
esting fault models. We believe that our proof technique should be applicable in a more general 
setting. One natural fault model suggested to us by Nicolas Cerf is the one in which each oracle 
query has probability p of turning the state into the completely mixed state. Also, is there any 
reasonable fault model for which a quantum speed-up is achievable? We suspect that the answer 
is no. 

Another open question is to extend our result to other search problems (see |'2'| for a recent 
survey). Is there any search problem for which a quantum speed-up is achievable with a faulty 
oracle? Can one extend our lower bound to a more general lower bound in the spirit of the adver- 
sary method (see |(Tl[TO | )? It is also worth investigating whether the polynomial method [Sj can 
be used to derive lower bounds in the faulty oracle case; our attempts to do so were unsuccess- 
ful. We should emphasize, however, that our faulty oracle model is not necessarily so natural for 
other search problems, and before approaching the above open questions, some thought should 
be given to the choice of the faulty oracle model. 

2 Preliminaries 

We assume familiarity with basic notions of quantum computation (see HZl)- 

Definition 1 (Grover oracle). For each k G {!,..., N} ivhere N is an integer, the perfect oracle O'^ is 
the unitary transformation acting on an N -dimensional register that maps \k) to — \k) and \i) to \ i) for each 
i ^ k, i.e., 

d' = -\k){k\ + ^\i){i\. 

We also extend the definition tok = Oby defining 0° to be the 'null' oracle, given by the identity matrix I. 

Definition 2. The p-faulty oracle Op is defined as the operation that with probability 1 — p, acts as the 
perfect oracle O'^ and otherwise does nothing, i.e., for any density matrix p, 

o'p{p) = {i-p)-d'pd'' + p-p. 

We note that instead of our phase-flipping oracle, one could also consider a bit-flipping oracle. 
Since it is not difficult to construct the latter from the former (see, e.g., | [T3l Chapter 8]), our lower 
bound also applies to the bit-flipping case. 

Definition 3. Let < p < 1 be some constant. In the p-faulty Grover problem, we are given oracle 
access to the p-faulty oracle O^for some unknown A: G {0, . . . , N} and our goal is to decide whether k = 
or not with success probability at least ^. 

Note that the choice of success probability is inconsequential, as one can easily increase it by 
repeating the algorithm a few times. Also note that we consider here the decision problem, as 
opposed to the search problem of recovering k from O^. Since we are interested in lower bounds, 
this makes our result stronger. 
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3 Proof 



We start by giving a brief outline of the proof. For simplicity, we consider the case p = 1/2. The 
proof starts with a simple, yet crucial, observation (Claim 121) which gives an alternative description 
of the faulty oracle. In the case p = 1/2, it says that the oracle Op is essentially performing the 
two-outcome measurement given by { }. Then, in Lemma |3l we 'approximate' the mixed 
states that arise during the algorithm with (unnormalized) pure states. This is done by assuming 
that the measurements done by the oracle all end up in the subspace. The rest of the proof 
is similar in structure to previous lower bounds. Using the pure state description, we define a 
progress measure Hf, which is initially zero. We show that at the end of the algorithm it must be 
high (Lemma ID), and that it cannot increase by too much at each step (Lemma |5]|. This yields the 
desired lower bound on the number of queries T. We now proceed with the proof. 

Let A be an algorithm for the p-faulty Grover problem on N elements that uses T queries. 
Assume the algorithm is described by the unitary operations Lfo, Ui, U2, . . .,Ut acting on an NM- 
dimensional system, composed of an N-dimensional query register used as oracle input, and an 
M-dimensional ancillary register. Let po denote the initial state of the system, which we assume 
without loss of generality to be a pure state po = \(po) {(po I • For k G {0, . . . , N}, we let = po, 



pI = UoPlUl p\ = OUpg), pI = U^p\Ul. 



UjPjUj be the intermediate states of the 



algorithm when run with oracle Op (see Figure [l]|. In other words, p^ is the state of the system 



right after applying Uf, and is the state of the system right after applying Op on . 



^0 



Qk 

P 



Po Po 









Qk 

p 



































































Qk 

V 





























































Ut 



p\ p\ pti Pt Pt Pt-i Pt Pt 



Figure 1: State evolution. 
First we show a different way to decompose the outcome of Op. 



Claim 2. Let \(p) G C'^'^ he an arbitrary vector and let |^,) G C^ he such that \(p) = YaL^ \i, j6,) . Then 

0),m{^\) = |^)(^|+4p(l-p)|/c,/3,)(/:,/3,| 

where 

_ N 

\cp) :=X:|/,/5,>-2(l-p)|fc,/5,). 



Proof: By Definition |2] we have 



0'„(|</')(</'|) = p|</')(<^| + (l-p)|t/')(i/'| 



where \ip) = YLi^^i - |fc,j6^). Therefore 

0),{\<P){CP\) =E E \i'^^)^h?>j\ - (1 - 2p) E %h){h?>j\ - (1 - 2p) E l^/^<)(^'/5/cl + %h){Kh 
i^kj^k j^k i^k 



£\hfi,)-{l-2p)\Kfi,) E(/'/^i|-(l-2p)(^.iS 
K^k J \j^k 



k\ 



(l-(l-2p)2)|fc,/3,)(/c,/5,|. 



We will use the following vectors to track the progress of the algorithm. 

Definition 4. For k G {0, . . . ,N} and t G {0,...,T} we define the vectors \(p'}), G C'^'^ and 
\oL^j) G as follows. First, 

Wo) ■■= l^o), 
\<P\) ■■= UtW) 



and are given by 



N 



Finally, for k E {1, . . . , N} and f G {0, . . . , T — 1} we de/i'ne 

|</,f+i) := -2(1 - p)\k,al,) = E -2(1 - p)|^,<,) 

1=1 

and for k = Owe define \(p'l_^_i) '■= |^°). 

Lemma 3. For all t E {0, . . . , T} and k E {!,..., N"}, we can write 
for some positive semidefinite matrix af. 

Proof: Fix some k G {1, . . . ,N}. The lemma clearly holds for t = (with cTq = 0). Suppose the 
lemma holds for t and let us prove it for t + 1. By the induction hypothesis, 

Pf+i = Oj(pf) = Oj(|<|)f)(<^f|) + 0j(c7f). (1) 
By Claim Hand the definition of ) (^f | 

o'p(|<^?)(<?f|) = \^l,){^U+M^-p)\K^l){k,^l\. 

By combining this with Eq. ^ we get 

5 



We apply Hit+i and obtain 

= Ut+i\^l,){^l,\Ul, + Ut+i (4p(l - p)|/:,4,)(/c,4,| + Oj(^f)) Ul, 

= \<Pt+i){4>Ui\ + (4p(l - p)|/c,<,)(/c,<,| +Of(^f)) Ul,. 

The second term is clearly positive semidefinite, as required. 

We now define our progress measure Hf. 
Definition 5. For t E {0, . . . , T} and k E {1, . . . , N} we define 



H 



Notice that Hg = 0. The following lemma shows that at the end of the algorithm, the progress 
measure must be not too small. Intuitively, this holds since if Hj is small, then \(pj) is close to 
\(p'^j) and since the latter is a unit vector, the former must be of norm close to 1. This, in turn, 
implies that pj is close to \(pj){(pj\, which is close to \(pj) {(pj\ = pj and thus the algorithm cannot 
distinguish between pj and pj in contrast to our assumption about the algorithm. We proceed 
with the formal proof. 

Lemma 4. For alike {1,..., N}, H\ > ^. 

Proof: By our assumption on the correctness of the algorithm. 
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< 



Pt-\<P't){<P't 



< Vl-(/rlPrl/r) 



= ^l-(/,|(|/,)(</>^,|+4)K) 

where our definition of trace norm is normalized to be in [0, 1] and in the second inequality 
we used that for a (normalized) pure state |<p) and a mixed state p, we have ||p — |^)(<?'|||tr < 
^JY^^J^\p\^ (see, e.g., (iTl Chapter 9]). Therefore, 

h|=|||/t)-I/t)||' 



>1-2|(</>0|/^)| > 



10' 



where the next to last inequality uses the fact that {<p^j\(p^j) = 1 and (^^|^^) > 0. ■ 

The following lemma bounds the amount by which the progress measure Hf can increase in 
each step. 
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Lemma 5. For allk E {1,. . . , N} and any < t < T, 

Proof: By the definition of the progress measure, 

Hl^ = \\\<PU) - \cpUf 

= ||U,+i|^ti)-LJf+i|<^0)||' 

= I - 2(1 - p){Kal\ - {cp^ml) - 2(1 - p)\Kal,) - \cp°)) 



Hf -4(1 - p) 114, f + 2(1 - +2(1 - p) +4(1 - H2 



< Hf -4p(l - p)||4,f + 4(1 - 

^ U'^ J- ^ ~ P II. ,0 ||2 
^ + —^\\%k\\ 

where the last inequality follows by maximizing the quadratic expression over ^^H- 
TheoremlH Any algorithm that solves the p-faulty Graver problem must use T > jQ^i—j^N queries. 
Proof: By Lemma |5l for all A: G {1, ... , N}, 

Tjk ^ I P V" ll/vO l|2 



T-l 

Since for any t, \<p\) is a unit vector. 



To complete the proof, note that by LemmalU > Jo^- ■ 
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